Advisories · Technology

Brainstorm Force SureCart.

Every CVE that names Brainstorm Force SureCart among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112241 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability
- Brainstorm Force SureCart
- Authentication bypass
Not analysed yet 22 Oct 2026
CVE-2026-112221 CVE record

CVSS 7.1 High

WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability
- Brainstorm Force SureCart
- Cross-site scripting (XSS)
Not analysed yet 21 Oct 2026
CVE-2026-112840 CVE record

CVSS 6.5 Medium

WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability
- Brainstorm Force SureCart
- Cross-site scripting (XSS)
Not analysed yet 20 Oct 2026
CVE-2026-105874 CVE record

CVSS 7.1 High

WordPress SureCart plugin <= 4.9.3 - Cross Site Scripting (XSS) vulnerability
- Brainstorm Force SureCart
- Cross-site scripting (XSS)
Not analysed yet 14 Oct 2026
CVE-2026-106599 CVE record

CVSS 8.8 High

WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability
- Brainstorm Force SureCart
- Insecure deserialization
Not analysed yet 14 Oct 2026
CVE-2026-109697 CVE record

CVSS 6.5 Medium

WordPress SureCart plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability
- Brainstorm Force SureCart
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026